Analysis
-
max time kernel
54s -
max time network
172s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
29-08-2022 22:22
General
-
Target
f2e0fa01291e35a38903a47acf970d79e55ea709131a903be2d87b679530702b.exe
-
Size
4.0MB
-
MD5
947ac0d59f24c19f55a89c4fcf08aca2
-
SHA1
0ae20cf5c7c0336b52f5c5416a9f283e9395fdf9
-
SHA256
f2e0fa01291e35a38903a47acf970d79e55ea709131a903be2d87b679530702b
-
SHA512
79d9e7f96e5e461bb0384c4de8c33e9758f973ee3a038ec7f0f42df280bc085ce9d83418fae7def66c22a8fb8a24689adbf400062715a30c2ef09d064bd4382c
-
SSDEEP
98304:ptEKyVAFmvKxD05DKgscpszdc/7JjkUjvHvN4mMXMmH9:pOKyW8WMDXscpSdc19jvH/V+
Score
10/10
Malware Config
Signatures
-
YTStealer
YTStealer is a malware designed to steal YouTube authentication cookies.
-
YTStealer payload 2 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2e0fa01291e35a38903a47acf970d79e55ea709131a903be2d87b679530702b.exe"C:\Users\Admin\AppData\Local\Temp\f2e0fa01291e35a38903a47acf970d79e55ea709131a903be2d87b679530702b.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14.1MB
-
Filesize
14.1MB
-
Filesize
14.1MB